1.20.200.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.200.210	attack	Unauthorised access (Oct 12) SRC=1.20.200.210 LEN=52 TOS=0x10 PREC=0x40 TTL=115 ID=1264 DF TCP DPT=445 WINDOW=8192 SYN	2020-10-13 02:23:02
1.20.200.210	attackbots	Unauthorised access (Oct 12) SRC=1.20.200.210 LEN=52 TOS=0x10 PREC=0x40 TTL=115 ID=1264 DF TCP DPT=445 WINDOW=8192 SYN	2020-10-12 17:48:34
1.20.200.210	attackspam	Invalid user user from 1.20.200.210 port 56474	2020-07-19 00:13:47

Type

Details

Datetime

1.20.200.210

attack

Unauthorised access (Oct 12) SRC=1.20.200.210 LEN=52 TOS=0x10 PREC=0x40 TTL=115 ID=1264 DF TCP DPT=445 WINDOW=8192 SYN

2020-10-13 02:23:02

1.20.200.210

attackbots

Unauthorised access (Oct 12) SRC=1.20.200.210 LEN=52 TOS=0x10 PREC=0x40 TTL=115 ID=1264 DF TCP DPT=445 WINDOW=8192 SYN

2020-10-12 17:48:34

1.20.200.210

attackspam

Invalid user user from 1.20.200.210 port 56474

2020-07-19 00:13:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.200.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40616
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.200.54.			IN	A

;; AUTHORITY SECTION:
.			150	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 20:33:55 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 54.200.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.200.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.32.223.147	attackbotsspam	RDP Brute-Force (honeypot 11)	2020-05-10 06:19:22
217.112.142.244	attackspam	May 9 23:25:18 web01.agentur-b-2.de postfix/smtpd[300244]: NOQUEUE: reject: RCPT from unknown[217.112.142.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 9 23:30:14 web01.agentur-b-2.de postfix/smtpd[298866]: NOQUEUE: reject: RCPT from unknown[217.112.142.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 9 23:30:15 web01.agentur-b-2.de postfix/smtpd[293228]: NOQUEUE: reject: RCPT from unknown[217.112.142.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 9 23:30:16 web01.agentur-b-2.de postfix/smtpd[300244]: NOQUEUE: reject: RCPT from unknown[217.112.142.244]: 450 4.7.1	2020-05-10 06:50:26
118.70.180.188	attackbotsspam	SSH Invalid Login	2020-05-10 06:33:09
106.51.113.15	attackbots	SSH Invalid Login	2020-05-10 06:16:47
186.216.70.112	attackspam	(smtpauth) Failed SMTP AUTH login from 186.216.70.112 (BR/Brazil/186-216-70-112.uni-wr.mastercabo.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-10 00:59:03 plain authenticator failed for ([186.216.70.112]) [186.216.70.112]: 535 Incorrect authentication data (set_id=ravabet_omomi@behzisty-esfahan.ir)	2020-05-10 06:31:14
103.131.71.85	attackbots	(mod_security) mod_security (id:210730) triggered by 103.131.71.85 (VN/Vietnam/bot-103-131-71-85.coccoc.com): 5 in the last 3600 secs	2020-05-10 06:47:33
61.146.199.186	attack	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-05-10 06:35:17
198.245.49.37	attackbots	SSH Invalid Login	2020-05-10 06:29:34
182.61.172.151	attackbotsspam	20 attempts against mh-ssh on echoip	2020-05-10 06:49:06
88.218.17.223	attack	May922:28:18server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=88.218.17.223DST=136.243.224.51LEN=40TOS=0x00PREC=0x00TTL=56ID=11464PROTO=TCPSPT=41160DPT=23WINDOW=18887RES=0x00SYNURGP=0May922:28:18server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=88.218.17.223DST=136.243.224.51LEN=40TOS=0x00PREC=0x00TTL=56ID=11464PROTO=TCPSPT=41160DPT=23WINDOW=18887RES=0x00SYNURGP=0May922:28:21server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=88.218.17.223DST=136.243.224.51LEN=40TOS=0x00PREC=0x00TTL=56ID=11464PROTO=TCPSPT=41160DPT=23WINDOW=18887RES=0x00SYNURGP=0May922:28:27server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=88.218.17.223DST=136.243.224.51LEN=40TOS=0x00PREC=0x00TTL=56ID=11464PROTO=TCPSPT=41160DPT=23WINDOW=18887RES=0x00SYNURGP=0May922:28:29server2kernel:Firewall:\TCP_INBlocked\IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:0	2020-05-10 06:26:22
134.122.124.193	attackbotsspam	5x Failed Password	2020-05-10 06:19:45
113.59.224.45	attackspambots	Automatic report BANNED IP	2020-05-10 06:15:16
195.231.3.146	attack	May 10 00:26:20 mellenthin postfix/smtpd[4917]: warning: unknown[195.231.3.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 00:44:00 mellenthin postfix/smtpd[5815]: warning: unknown[195.231.3.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-05-10 06:51:29
92.154.95.236	attackbotsspam	Port scan on 14 port(s): 1040 1045 1105 1119 1641 2065 3211 3306 5907 5988 5998 6007 10001 61900	2020-05-10 06:34:55
49.232.132.10	attackspam	May 10 00:11:25 legacy sshd[20763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.132.10 May 10 00:11:28 legacy sshd[20763]: Failed password for invalid user igor from 49.232.132.10 port 52008 ssh2 May 10 00:16:14 legacy sshd[20906]: Failed password for root from 49.232.132.10 port 43700 ssh2 ...	2020-05-10 06:31:31

Recently Reported IPs

1.20.200.29	144.180.57.89	1.20.200.72	233.174.53.33
1.20.200.80	1.20.200.88	1.20.201.103	1.20.201.105
1.20.201.117	1.20.201.124	1.20.201.128	1.20.201.130
1.20.201.132	1.20.201.144	1.20.201.146	1.20.201.15
1.20.201.159	1.20.201.160	1.20.201.163	1.20.201.167